Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Arkeia | Knox_software | 4.2 (including) | 4.2 (including) |
| Arkeia | Knox_software | 4.2.8.2 (including) | 4.2.8.2 (including) |